News
Coverage of crypto exploits, drains and scams, alongside reports filed by people who lost funds. Every item names the addresses involved and what PublicAML sees on them.
Investigations
- Where Amir Capital’s money went: a four-chain trace
- Finiko: what the chain says, and why the published totals conflict
- Finiko’s FNK token: the $14 million taken from its pool two years after the collapse
- FomoPeek: the App Store app that read wallet keys off the phone
- Term Labs: all of the stolen ETH went to Tornado Cash, and the DAI went to Robinhood Chain
- Nesa: the "$50 million" exploit that cashed out at about 109 ETH, into KuCoin
- Nomic and Osmosis allBTC: the 40.65 BTC nobody noticed for 74 days
- Tectonic: the branch that skipped Tornado — 232 XMR1 still sitting on Hyperliquid
- Liquid Network hack: the 598.5 BTC has not moved
Items marked Report are filings from readers, published as they were filed. Most have not been checked by anyone, and an unchecked report puts no risk label on any address. File a report.
- News
Nostra Faces $3.5 Million Loss from Rigged Oracle Pool
Nostra experienced a significant loss due to a manipulated oracle price feed. The incident involved a fake NSTR price that was 8,306 times the actual value, leading to unauthorized borrowing.
- News
Astroport Suffers $4.9 Million Loss from Malicious Proposal
Astroport experienced a significant security incident resulting in a loss of $4.9 million. The incident was triggered by a malicious proposal that compromised the platform.
- News
Drop suffers $4.4 million loss from malicious proposal
Drop experienced a significant financial loss due to a malicious proposal. The incident resulted in a loss of $4.4 million.
- News
DoinGud NFT Platform Exploited for $35,486 via Bug
The NFT platform DoinGud was exploited for $35,486 due to a bug in its bidding contract.
- News
Authorization Flaw in GaslessReservoirEnabler Leads to $23,000 Loss
An authorization flaw in the GaslessReservoirEnabler contract allowed an attacker to drain funds from multiple token-holder addresses. The incident affected approximately 997 addresses, resulting in a total loss of $23,000.
- News
Internet Token DAO Exploited for $265,000 in LiquidityUnifier Incident
Internet Token DAO's LiquidityUnifier was exploited, resulting in a significant loss. The attacker manipulated a Uniswap V3 pool address to mint a large amount of INT tokens.
- News
RWC Token Exploited on BSC via Flash Loan Attack
The RWC token on the BNB Smart Chain was exploited through a flash loan, resulting in a loss of approximately 109,460.85 USDT. The attack involved an unprotected burn function that allowed the attacker to manipulate token reserves.
- News
The Internet Token suffers loss due to arbitrary external call
The Internet Token experienced a loss of $16,380 due to an arbitrary external call. The incident highlights vulnerabilities in the token's smart contract interactions.
- News
Where Amir Capital's money went: a three-chain trace
An on-chain trace of the Amir Capital investment scheme across Bitcoin, Tron and Ethereum. 4,262 BTC and $51.1M in USDT passed through wallets that are empty today, but one Aave position worth roughly $17.8M is still live — and it moved to a new address on 11 August 2026.
- News
Blink Wallet Pauses Services After Security Incident
Blink Wallet has paused its services to investigate a security incident involving custodial accounts. An attacker accessed a limited number of these accounts and withdrew funds, but most funds remain secure.
- News
Fetch.ai Suffers $1.53 Million Loss Due to Private Key Compromise
Fetch.ai experienced a significant security incident resulting in a loss of $1.53 million. The breach was attributed to a compromised private key.
- News
MultiversX Network Paused Due to Exploit Attempt
An exploit attempt on the MultiversX mainnet led to invalid on-chain state changes. The network was paused to prevent further impact while engineers worked on a fix.
- News
NuNet Suffers Loss Due to Private Key Compromise
NuNet experienced a significant security incident resulting from a compromised private key. The incident led to a loss of $462,730.
- News
Likwid Exploited for $55,721 Due to Contract Bug
The BNB Chain DeFi protocol Likwid suffered an exploit resulting in a loss of $55,721. The incident involved a bug in the margin-borrow contract that allowed the attacker to drain funds from the vault.
- News
Nomic Flaw Leads to $3.15 Million Loss for Osmosis
A flaw in Nomic's forwarding logic resulted in a significant loss for Osmosis. The incident involved the minting of unbacked nBTC and the subsequent movement of funds to Tornado Cash.
- News
Nostra DeFi Protocol Exploit Results in $3.5 Million Loss
Nostra, a DeFi lending protocol, experienced an exploit due to oracle price manipulation. An attacker borrowed approximately $3.5 million in various cryptocurrencies using inflated collateral.
- News
Nostra Money Market Suffers $3.5 Million Loss from Price Manipulation
Nostra Money Market experienced a significant loss due to spot price manipulation. The incident resulted in a total loss of $3.5 million.
- News
Bonfiretoken Incident Involves $50,000 Loss Due to Access Control Flaw
An access control vulnerability in the BonfireSwap router led to a loss of approximately $50,000. The incident affected around 41 approved holders of the token.
- News
Flamincome Exploited for $345,900 Due to Unsafe Asset Accounting
Flamincome, associated with Flamingo Finance, suffered an exploit resulting in a loss of $345,900. The incident involved unsafe asset accounting and valuation techniques.
- News
Liquid Network Exploit Results in $320 Million Loss
An exploit in the Liquid Network led to a significant loss of funds. The incident involved the minting of unbacked L-BTC through a cache-key collision.
- News
Nimiq Targeted by Meta-Transaction Auth Flaw Exploit
An attacker exploited a vulnerability in OpenGSN meta-transactions affecting Nimiq. The incident resulted in a loss of approximately $50,463.
- News
Startale Suffers Loss Due to Improper Access Control
Startale experienced a security incident resulting in a loss of $2,876. The incident was attributed to improper access control mechanisms.
- News
Bonfire Suffers $47,400 Loss Due to Improper Access Control
Bonfire experienced a security incident resulting in a loss of $47,400. The incident was attributed to improper access control mechanisms.
- News
DCENT Wallet Issues Urgent Security Alert Over Abnormal Transfers
DCENT Wallet reported abnormal asset transfers in its mobile App Wallet, prompting an investigation. Users are advised to transfer funds to secure wallets immediately.
- News
Exploitation of Liquid Network Results in $320 Million Loss
An actor exploited a vulnerability in Elements to mint unbacked L-BTC, draining $320 million from Liquid Network. The actor returned a majority of the funds but retained a portion, leading to ongoing disputes.
- News
Long Bridge Incident Involves Fabricated Withdrawals
Long Bridge experienced a security incident where funds were released due to fabricated events. The issue was resolved the same day without user losses.
- News
Spiral Suffers Loss from Uniswap V4 Pool Manipulation
Spiral experienced a loss of approximately $26,800 due to a manipulation of the Uniswap V4 pool spot price. The attack involved bypassing a guard mechanism to borrow against inflated collateral.
- News
Tectonic Suffers $120.4 Million Loss from Token Manipulation
An attacker inflated Tectonic's TONIC token and borrowed against it, leading to significant losses. A rollback recovered most of the funds, but a portion remains unrecovered.
- News
Chainflip Exploited on TRON USDT Integration, Leading to Significant Loss
Chainflip lost 736,442.17 USDT on its TRON USDT integration to duplicated refunds. PublicAML traced the exploiter, its funding wallet and a 749,000 USDT consolidation that is moving to a Binance deposit address.
- News
Dominion Market's $SILV Treasury Compromised, $238K Lost
Dominion Market's Solana silver token $SILV experienced a treasury multisig compromise, resulting in a loss of $238,000. The attacker exploited a 3-of-5 key mechanism to deplete the treasury and manipulate token liquidity.
- News
Ether.fi Liquid Users Lose Funds Due to Access Control Exploit
Users of ether.fi Liquid lost approximately 15.45 ETH due to an exploit. The incident affected around 11 users.
- News
$50 million bridged from Nesa to Ethereum in security incident
An attacker bridged 257.7 million NES from Nesa to Ethereum, resulting in a loss of approximately $50 million. The incident is linked to a known bug chain affecting multiple platforms.
- News
OMNI404 Token Exploit Results in Loss of $5,923
An exploit involving the OMNI404 token led to a loss of $5,923. The attack utilized flash loans and Uniswap V3 swaps to drain funds from the pool.
- News
ORBToken Exploited for $32,610.72 on BSC
ORBToken suffered an exploit resulting in a loss of $32,610.72. The attack involved exploiting vulnerabilities in the token's functions and mechanisms.
- News
Symbiosis Bitcoin Bridge Exploit Results in $336,000 Loss
An exploit of Symbiosis's Bitcoin Bridge led to a significant loss of funds. The attacker minted unbacked syBTC and sold WBTC on Ethereum.
- News
Private Key Compromise at Dominion
Dominion experienced a security incident involving a compromised private key. The details regarding the mechanism and financial loss are not specified.
- News
Symbiosis Suffers $336,000 Loss from Unbacked Cross-Chain Mint
Symbiosis experienced a loss of $336,000 due to an unbacked cross-chain mint incident.
- News
Amnext Exploited for $116,100 via Mass Minting
The Amnext protocol on BSC was exploited, resulting in a loss of $116,100. An attacker mass-minted Ticket AMC and drained funds through PancakeSwap.
- News
BeatSwap Exploit Results in $77,512 Loss on BSC
BeatSwap was exploited on the BSC chain, leading to a loss of $77,512. The attack involved manipulating the price oracle used by the platform.
- News
BeatXswap Suffers Loss from Spot Price Manipulation
BeatXswap experienced a loss due to spot price manipulation. The incident resulted in a financial impact of $77,512.
- News
Nomic nBTC Bridge Exploit Results in $3.15 Million Loss
A bug in Nomic's forwarding mechanism allowed an attacker to double-spend nBTC. The incident led to the freezing of funds and a governance proposal to recover losses.
- News
Zentra Finance Exploited for $140,030 via Flash Loan Attack
Zentra Finance suffered a loss of $140,030 due to a single transaction exploit. The attack involved using flash liquidity to drain funds from the lending pool.
- News
$50 million bridged from Nesa to Ethereum in security incident
An incident involving Nesa resulted in the bridging of $50 million worth of NES to Ethereum. The mechanism of the attack was not disclosed by Nesa.
- News
$50 million NES bridged from Nesa to Ethereum in security incident
An attacker bridged 257.7 million NES from Nesa to Ethereum, resulting in a loss of approximately $50 million. The incident is linked to a known vulnerability affecting other platforms in the Cosmos EVM ecosystem.
- News
WealthManagementV2 Contract Exploited for 26,414 USDT Loss
The WealthManagementV2 contract experienced a loss of 26,414 USDT due to suspected illegal transfer of owner privileges. An attacker manipulated contract parameters and withdrew funds in a single transaction.
- News
Cozy Finance Exploit Results in $170,000 Loss
An exploit against Cozy Finance has resulted in a loss of approximately $170,000. The attack involved burning Cozy PTokens and transferring USDC.e from a Cozy Set contract.
- News
DEX Router Exploit on BSC Results in Loss of $46,070
An unnamed DEX router on BNB Chain was exploited, leading to a loss of $46,070. The attacker drained token allowances from multiple wallets in a single transaction.
- News
Liquid Network Exploit Results in $320 Million Loss
A bug in Elements allowed attackers to create unbacked L-BTC and withdraw BTC from Liquid.
- News
Dream Health Chain Suffers $71,800 Loss Due to Reward Logic Flaw
A reward logic flaw on the Dream Health Chain resulted in a loss of $71,800. The incident occurred on the Binance Smart Chain (BSC).
- News
Reddio's RedSonic Vault Exploited for $22,940 on Ethereum
Reddio's RedSonic Vault on Ethereum was exploited, resulting in a loss of approximately $22,940. The attacker utilized a flash loan to manipulate the vault's share price and redeem excess assets.
Archive
- Reddio RedSonic Suffers Loss Due to Incorrect Share Accounting
- Rocket Suffers $287K Loss from Exploit of Dormant Market
- Secured Finance Ethereum Lending Market Drained
- Notional Finance Exploited for $1.73M in Legacy Contract Attack
- Arithmetic Error Leads to Loss for Notional V2
- Unauthorized Transactions Affect XRPH Wallet Users
- GebProxyActions Contract Exploited for $14,000
- KiiChain Loses $9.7 Million in Cosmos EVM Exploit
- TAC Loses $7.5M Due to Cosmos EVM Underflow Bug
- Ankr Suffers $410,000 Loss from Unbacked Mint Incident
- Aquifer Exploited for $2.5 Million in Funds
- Balancer V1 Exploit Results in $234,000 Loss
- Float Protocol Suffers $28,000 Loss from Spot Price Manipulation
- Mantra suffers $3.6 million loss from Cosmos EVM underflow bug
- MORE Markets Suffers $9.3 Million Loss Due to Borrow Logic Flaw
- Radix Suffers $1.25 Million Loss Due to Improper Access Control
- Rounding Error Leads to $234,000 Loss on Balancer V1
- Tectonic Suffers $75 Million Loss from Spot Price Manipulation
- Spot Price Manipulation Incident at Weft V2
- Fogo Foundation Compromised, 400 Million Tokens Sent to Bad Actor
- Oracle Misconfiguration Affects Full Sail
- Security Incident Involving Permapod
- Ajna V2 Suffers $775,400 Loss Due to Liquidation Logic Flaw
- Withdrawal Logic Flaw Leads to Significant Loss for Avici
- Fogo Foundation Suffers $3 Million Loss from Private Key Compromise
- Mantra Suffers $3.6 Million Loss Due to Cosmos EVM Underflow Bug
- Oracle Misconfiguration Leads to Significant Loss for Virtue
- CashCowCoin suffers $117,400 loss due to flawed trading router
- CCC Suffers $117,000 Loss Due to Swap Logic Flaw
- Moonwell DeFi Protocol Suffers $8.79 Million Attack
- FH Token Exploit on BSC Results in $20,000 Loss
- Term Labs Vaults Drained Due to Governance Exploit
- CometDEX Suffers $717,000 Loss Due to Incorrect Share Accounting
- Enjin Suffers Ownership Takeover Incident
- FH Token Suffers $20,000 Loss Due to Swap Logic Flaw
- Steakhouse Financial Suffers $920,000 Loss Due to Risk Parameter Abuse
- Arithmetic Error Leads to $50 Million Loss for Nesa
- Arithmetic Error Leads to $90,750 Loss at PacaSwap DEX
- Spot Price Manipulation Incident on Arrakis V1
- Surf Lending Suffers Private Key Compromise
- Malicious Proposal Targets TermFinance Vaults, Causing $8.5M Loss
- Warp.green ERC-20 Bridge Exploit Results in $93,000 Loss
- KiiChain Suffers $9.7 Million Loss Due to Arithmetic Error
- Withdrawal Logic Flaw Leads to $7.5M Loss for TAC
- Improper Access Control Incident at The Sandbox
- Improper Access Control Incident on MANTRA Chain
- The Sandbox SAND Bridge Exploited for $675,000
- MANTRA Chain exploited for 720.9 million tokens due to vulnerability
- Allbridge Suffers $191,000 Loss Due to Logic Flaw
- BounceBit Suffers $3 Million Loss Due to Improper Access Control
- Harmony Suffers $3.2 Million Loss Due to Replay Attack
- Maya Protocol Suffers $1.7 Million Loss Due to Withdrawal Logic Flaw
- FoxMarket Exploit Results in $118,700 Loss
- Bodega Market Suffers Security Incident
- $8.07 Million Lost from Coinsbuy in Under an Hour
- Cold Card Firmware Vulnerability Leads to $130 Million Theft
- Infinite Mint Incident on Harmony Bridge
- Harmony Protocol Exploited, 4 Billion ONE Tokens Minted Unauthorized
- USM Protocol Exploit Results in $136,000 Loss
- Coinsbuy Loses Over $7.9 Million in Crypto Drain
- Coreum Bridge Suffers $200,000 Loss Due to Logic Flaw
- Unbacked Cross-Chain Mint Incident at Oraichain
- Atomic Green Suffers $29,984 Loss from Signature Replay Exploit
- Unbacked Cross-Chain Mint Incident Affects Oraichain
- Security incident involving Ravencoin confirmed
- Private Key Compromise at Hyperliquid Malaysia
- KITE Foundation Pauses Transfers After Token Compromise
- Malicious Proposal Targets Panther Protocol
- RRWallet Suffers $2 Million Loss Due to Weak Key Generation
- Unistreets LaunchpadFactoryAuto Contract Exploited
- Unistreets Suffers $17,750 Loss Due to Arbitrary External Call
- ZEUS Infrastructure Experiences Cybersecurity Incident
- Access Control Exploit on RISEx Results in $673,000 Loss
- LOOPSDAO Exploited for $690,000 on BSC
- MOKE Token Exploit on BNB Chain Results in Significant Loss
- Critical Entropy Vulnerability in Coldcard Wallet Leads to $70.2 Million Loss
- Set Protocol Exploited Due to Smart Contract Vulnerability
- Private Key Compromise at Swan Treasury Results in Significant Loss
- VerusCoin Ethereum Bridge Exploit Results in $7.54 Million Loss
- Crypto DAO Exploit Results in $52,000 Loss
- LULA Token Exploited on BSC Leading to Significant Loss
- AFX Trade Loses $24.15 Million Due to Compromised Validator Signatures
- ChainConnect EVM Integration Compromised, $650,000 Lost
- Garden Finance Exploit Results in $450,000 Loss
- WEMIX Smart Contract Compromised, $6.25 Million Lost
- Social Account Takeover Incident at Bankr
- Bankrbot X Account Compromised, Wallet Drained
- Projekt reward vault exploited on Ethereum
- DeBond Suffers $542,000 Loss Due to Accounting Error
- Lien Finance Exploited for $542K in USDC
- Triple-A Suffers Unauthorized Access to Hot Wallets
- Solido Cash Exploited Due to Oracle Misassignment
- Verus Ethereum Bridge Exploited for $7.54 Million
- 42DAO Exploit Leads to Significant Losses
- AFX Bridge Exploited for $24.15 Million USDC
- Zilliqa Suffers Hidden Number Problem Exploit
- Unauthorized Withdrawal Detected at FlashTrade
- Ostium Loses $23.75 Million Due to Price Manipulation
- Wanchain Cardano-BNB Chain Bridge Exploited for $10 Million
- Allbridge Core Exploited for $1.65 Million
- Zilliqa Cold Wallet Theft Linked to Ledger App Vulnerability
- Attack on Across Cross-Chain Bridge Protocol
- FlyCow Suffers $65,300 Loss Due to Incorrect Share Accounting
- DefiTuna Lending Exploit Results in $580K Loss
- BarnBridge Suffers Governance Attack Resulting in $776,000 Loss
- Cascade Platform Suffers $1.34 Million Attack on Arbitrum
- Price Oracle Manipulation Incident at Cascade Liquidity Strategy
- Ostium Suffers $18 Million Oracle Manipulation Exploit
- TeleSwap Cross-Chain Bridge Exploited with $735,000 Loss
- Bonzo Finance Loses $9.05 Million Due to Oracle Verifier Error
- Drips Network Exploited for $24,900 Due to Integer Vulnerability
- Chi Protocol Exploited for $8,500 Due to Logic Error
- Lumi Finance Exploit Results in $270,000 Loss
- BlueMove DEX Suffers $529,000 Loss Due to LP-share Inflation
- Bonzo Lend Exploited for $9.05 Million via Oracle Vulnerability
- $19.3 Million Drained from BonkDAO in Governance Attack
- $6.04 Million Stolen from Summer Finance's Lazy Summer Depositors
- BonkDAO Governance Attack Results in $20M Loss
- Lazy Summer Protocol Exploit Results in $6.04M Loss
